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DETAILED ACTION 

1 . Claims 1 , 3-9, 1 1 -1 7, 1 9-24 are pending in this application. Claims 2, 1 0, and 1 8 
have been cancelled by amendment filed on 03/18/2008 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

(e) the invention was described in (1 ) an application for patent, published under section 1 22(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

3. Claims 1, 2, 4-10, 12-18, 20-24 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Weatherby et al. (Pub # US 20004/0054741 A1, hereinafter 
Weatherby). 

4. With respect to claim 1 , Weatherby discloses a method for establishing trust in 
an email client, the method comprising: 

accepting in an email server a data communications connection from an email client 
([0029], lines 2-3), wherein the connection includes the email client's network address 
([0030], lines 1-4); 

determining from a stored list of trusted network addresses whether the email client is 
trusted according to the email client's network address ([0033], lines 1-6); 



Application/Control Number: 10/809,586 Page 3 

Art Unit: 2157 

if the email client is not trusted according to the email client's network address, receiving 
authentication data from the email client and determining whether the email client is 
trusted according to the authentication data ([0015], lines 1-9); and 
if the email client is not trusted according to the email client's network address and the 
email client is not trusted according to the authentication data, receiving a sender 
domain name for an email message from the email client and determining whether the 
email client is trusted according to the sender domain name ([0030], lines 1-7), wherein 
determining whether the email client is trusted according to the sender domain name 
further comprises requesting from a domain name service a resource record of a type 
that lists for a sender domain network addresses of email exchanges that are 
authorized to act as outbound email exchanges for the sender domain ([0030], lines 1 -7, 
[0041], lines 10-18, [0029], lines 1-13, [0033], lines 1-6). 

5. With respect to claim 4, Weatherby discloses the email client is trusted according 
to the authentication data, and the method further comprises storing the email client's 
network address in association with a trust time limit in the list of trusted network 
addresses ([0040], lines 1-7). 

6. With respect to claim 5, Weatherby discloses accepting in the email server a 
connection from an email client requesting delivery of an email message ([0029], lines 
2-3) according to a protocol that includes client authentication ([0031], lines 1-3, wherein 
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the connection includes the network address of the email client requesting delivery of an 
email message ([0029], lines 4-6, lines 10-13); 

authenticating the email client requesting delivery of an email message ([0030], lines 1- 
4, [0031], lines 1-3); 

delivering the email message to the email client requesting delivery of an email 
message ([0030], lines 7-1 1 ); and 

storing the network address of the email client requesting delivery of an email message 
in association with a trust time limit in the list of trusted network addresses ([0040], lines 
1-7). 

7. With respect to claim 6, Weatherby discloses the email client is an email 
exchange that accepts outbound email messages only from trusted senders ([0033], 
lines 1-6). 

8. With respect to claim 7, Weatherby discloses receiving a sender domain name 
further comprises receiving the sender domain name in an SMTP MAILFROM message 
([0029], lines 4-6). 

9. With respect to claim 8, Weatherby discloses the email client is not trusted 
according to the email client's network address, the email client is not trusted according 
to the authentication, the email client is not trusted according to the sender domain 
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name, and the method further comprises sending an error message to the email client 
and closing the connection ([0030], lines 7-9, [0031], lines 1-3, lines 7-8). 

1 0. With respect to claim 9, Weatherby discloses a system for establishing trust in an 
email client, the system comprising: 

means for accepting in an email server a data communications connection from an 
email client ([0029], lines 2-3), wherein the connection includes the email client's 
network address ([0030], lines 1-4); 

means for determining from a stored list of trusted network addresses whether the email 
client is trusted according to the email client's network address ([0033], lines 1-6); 
means for receiving authentication data from the email client and means for determining 
whether the email client is trusted according to the authentication data if the email client 
is not trusted according to the email client's network address ([0015), lines 1-9 ); and 
means for receiving a sender domain name for an email message from the email client 
and means for determining whether the email client is trusted according to the sender 
domain name if the email client is not trusted according to the email client's network 
address and the email client is not trusted according to the authentication data ([0030], 
lines 1-7), wherein determining whether the email client is trusted according to the 
sender domain name further comprises requesting from a domain name service a 
resource record of a type that lists for a sender domain network addresses of email 
exchanges that are authorized to act as outbound email exchanges for the sender 
domain ([0030], lines 1-7, [0041], lines 10-18, [0029], lines 1-13, [0033], lines 1-6). 
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1 1 . With respect to claim 12, Weatherby discloses the email client is trusted 
according to the authentication data, and the system further comprises means for 
storing the email client's network address in association with a trust time limit in the list 
of trusted network addresses ([0040], lines 1-7). 

12. With respect to claim 1 3, Weatherby discloses means for accepting in the email 
server a connection from an email client requesting delivery of an email message 
([0029], lines 2-3) according to a protocol that includes client authentication ([0031], 
lines 1-3, wherein the connection includes the network address of the email client 
requesting delivery of an email message ([0029], lines 4-6, lines 10-13); 

means for authenticating the email client requesting delivery of an email message 
([0030], lines 1-4, [0031], lines 1-3); 

means for delivering the email message to the email client requesting delivery of an 
email message ([0030], lines 7-11); and 

means for storing the network address of the email client requesting delivery of an email 
message in association with a trust time limit in the list of trusted network addresses 
([0040], lines 1-7). 

1 3. With respect to claim 1 4, Weatherby discloses the email client is an email 
exchange that accepts outbound email messages only from trusted senders ([0033], 
lines 1-6). 
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14. With respect to claim 1 5, Weatherby discloses means for receiving a sender 
domain name further comprises means for receiving the sender domain name in an 
SMTP MAILFROM message ([0029], lines 4-6). 

1 5. With respect to claim 16, Weatherby discloses means for sending an error 
message to the email client and means for closing the connection if the email client is 
not trusted according to the email client's network address, the email client is not trusted 
according to the authentication, and the email client is not trusted according to the 
sender domain name ([0030], lines 7-9, [0031], lines 1-3, lines 7-8). 

16. With respect to claim 1 7, Weatherby discloses a computer program product for 
establishing trust in an email client, the computer program product comprising: means, 
recorded on the recording medium ([0059], lines 9-14), for accepting in an email server 
a data communications connection from an email client ([0029], lines 2-3), wherein the 
connection includes the email client's network address ([0030], lines 1-4); 

means, recorded on the recording medium ([0059], lines 9-14), for determining from a 
stored list of trusted network addresses whether the email client is trusted according to 
the email client's network address ([0033] lines 1-6); 
means, recorded on the recording medium ([0059], lines 9-14), for receiving 
authentication data from the email client and means, recorded on the recording 
medium, for determining whether the email client is trusted according to the 
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authentication data if the email client is not trusted according to the email client's 
network address ([0015], lines 1-7); and 

means, recorded on the recording medium ([0059], lines 9-14), for receiving a sender 
domain name for an email message from the email client and means, recorded on the 
recording medium, for determining whether the email client is trusted according to the 
sender domain name if the email client is not trusted according to the email client's 
network address and the email client is not trusted according to the authentication data 
([0030], lines 1-7), wherein determining whether the email client is trusted according to 
the sender domain name further comprises requesting from a domain name service a 
resource record of a type that lists for a sender domain network addresses of email 
exchanges that are authorized to act as outbound email exchanges for the sender 
domain ([0030], lines 1-7, [0041], lines 10-18, [0029], lines 1-13, [0033], lines 1-6). 

17. With respect to claim 20, Weatherby discloses the email client is trusted 
according to the authentication data, and the computer program product further 
comprises means, recorded on the recording medium , for storing the email client's 
network address in association with a trust time limit in the list of trusted network 
addresses ([0040], lines 1-7). 

18. With respect to claim 21 , Weatherby discloses means, recorded on the recording 
medium, for accepting in the email server a connection from an email client requesting 
delivery of an email message ([0029], lines 2-3) according to a protocol that includes 



Application/Control Number: 10/809,586 Page 9 

Art Unit: 2157 

client authentication ([0031], lines 1-3), wherein the connection includes the network 
address of the email client requesting delivery of an email message ([0029], lines 4-6, 
lines 10-13); 

means, recorded on the recording medium, for authenticating the email client requesting 

delivery of an email message ([0030], lines 1-4, [0031], lines 1-3); 

means, recorded on the recording medium, for delivering the email message to the 

email client requesting delivery of an email message ([0030], lines 7-1 1 ); and 

means, recorded on the recording medium, for storing the network address of the email 

client requesting delivery of an email message in association with a trust time limit in the 

list of trusted network addresses ([0040], lines 1-7). 

1 9. With respect to claim 22, Weatherby discloses the email client is an email 
exchange that accepts outbound email messages only from trusted senders ([0033], 
lines 1-6). 

20. With respect to claim 23, Weatherby discloses means, recorded on the 
recording medium, for receiving a sender domain name further comprises means, 
recorded on the recording medium, for receiving the sender domain name in an SMTP 
MAILFROM message ([0029], lines 4-6). 

21 . With respect to claim 24, Weatherby discloses means, recorded on the recording 
medium, for sending an error message to the email client and means, recorded on the 
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recording medium, for closing the connection if the email client is not trusted according 
to the email client's network address, the email client is not trusted according to the 
authentication, and the email client is not trusted according to the sender domain name 
([003], lines 7-9, [0031], lines 1-3, lines 7-8). 

Claim Rejections - 35 USC § 103 

22. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

23. Claims 3, 11, and 19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Weatherby as applied to claims 1, 9, and 17 in view of Lalonde 
et al. (US Pub # 2004/0068542 A1, hereinafter Lalonde). 

24. With respect to claims 3, 1 1 , and 19, Weatherby discloses the method step, 
means for, and computer program product recorded on the recording medium for 
determining whether the e-mail client is trusted according to the sender domain name 
further comprises determining whether a domain name service resource record 
associates the email client's network address with the sender domain name and lists for 
a sender domain network addresses of email exchanges that are authorized to act as 
outbound email exchanges for the sender domain ([0030], lines 1-7, [0041], lines 10-18) 
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but does not disclose the DNS resource record being of a type that lists for a sender 
domain network addresses of email exchanges that are authorized to act as outbound 
email exchanges for the sender domain. 

In the same field of endeavor, Lalonde discloses the DNS resource record being 
of a type that lists for a sender domain network addresses of email exchanges that are 
authorized to act as outbound email exchanges for the sender domain ([0039], lines 8- 
13). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to modify the teachings of Weatherby with the 
teachings of Lalonde in order to extract the IP address from the server domain name 
and vice versa. 

Response to Arguments 

25. Applicant's arguments, with regards to the amendment of claim 1 which was 
amended by cancelling claim 2 and incorporating the limitation of claim 2 into claim 1 , 
filed 03/18/2008 have been fully considered by they are not persuasive. 

26. On page 1 3 of the Applicant's Response, applicants state that Weatherby "Does 
not disclose requesting from a domain name service a resource record of a type that 
lists for a send domain network address of email exchanges that are authorize to act as 
outbound email exchanges for the sender domain". 
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The Examiner respectfully disagrees with Applicant's arguments because 
Weatherby discloses a system that is able to determine the sender's IP address by the 
e-mail address ([0029]) which compares to a system-wide list of E-mail address which 
are to be blocked and discards the messaged sent from a blocked E-mail address 
([0030]), if the e-mail has not been blocked by the system-wide clock list or the sender's 
block list, the sender's E-mail address is compared to the recipient's verified list ([0033] 
as cited in claim 1 in first office action). A domain name service translates human- 
readable computer hostnames into IP addresses. When an e-mail is received, the IP 
address is found (requesting domain name service of a list of certain type of record, i.e. 
a list of blocked/verified E-mail addresses) which then is compared to a system of 
blocked E-mail addresses, if it is not blocked, it compares it to the verified list (record of 
lists of sender domain network addresses authorized to act as outbound email 
exchanges for the sender domain). 

27. Therefore, in view of the above reasons, Examiner maintains rejections. 

Conclusion 

28. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
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TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

29. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to HO SHIU whose telephone number is (571)270-3810. 
The examiner can normally be reached on Mon-Thur (8:30am - 4:00pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ario Etienne can be reached on 571-272-4001 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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June 07, 2008 
HTS 

Ho Ting Shiu 
Patent Examiner 
Art Unit 2157 



/Ario Etienne/ 

Supervisory Patent Examiner, Art Unit 2157 



